Skip to content

Commit aeef00a

Browse files
hktalenthktalent
committed
恢复前版本 2023-08-31
1 parent d5b9806 commit aeef00a

File tree

1,009 files changed

+58718
-35418
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,009 files changed

+58718
-35418
lines changed

‎README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -225,6 +225,7 @@ more see: <a href=https://github.com/hktalent/ProScan4all/discussions>discussion
225225
|<img src=https://raw.githubusercontent.com/hktalent/myhktools/main/md/wc.png>|<img width=166 src=https://raw.githubusercontent.com/hktalent/myhktools/main/md/zfb.png>|[paypal](https://www.paypal.me/pwned2019) **[email protected]**|<img width=166 src=https://raw.githubusercontent.com/hktalent/myhktools/main/md/BTC.png>|<img width=166 src=https://raw.githubusercontent.com/hktalent/myhktools/main/md/BCH.jpg>|
226226
227227
<!--
228+
go mod vendor 2>&1|grep "go get "|sort -u
228229
229230
cat $HOME/MyWork/scan4all/json/paypal.com.json|sed 's/=.*//g'|sort -u|nuclei -sa -t $PWD/config/nuclei-templates -no-strict-syntax -severity critical,high,medium -type http,network,websocket,dns,ssl -report-config $PWD/config/nuclei_esConfig.yaml -ztls -config-directory ${PWD}/config/nuclei -interactions-cache-size 5000 -interactions-eviction 60 -interactions-poll-duration 5 -interactions-cooldown-period 5 -max-host-error 5 -duc -json -o paypal_nuclei.json
230231

‎brute/admin_brute.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ package brute
33
import (
44
"crypto/md5"
55
"fmt"
6-
"github.com/hktalent/ProScan4all/lib/util"
6+
"github.com/hktalent/scan4all/lib/util"
77
"net/url"
88
"regexp"
99
"strings"

‎brute/basic_brute.go

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,13 @@
11
package brute
22

33
import (
4-
"github.com/hktalent/ProScan4all/lib/util"
4+
"github.com/hktalent/scan4all/lib/util"
55
)
66

77
// 优化应该考虑
8-
// 1、一天内相同目标的结果缓存，只执行一次
9-
// 2、应该考虑多线程并发执行
8+
//
9+
// 1、一天内相同目标的结果缓存，只执行一次
10+
// 2、应该考虑多线程并发执行
1011
func Basic_brute(url string) (username string, password string) {
1112
if req, err := util.HttpRequsetBasic("asdasdascsacacs", "adcadcadcadcadcadc", url, "HEAD", "", false, nil); err == nil {
1213
// 超文本传输​​协议(HTTP) 401 Unauthorized 客户端错误状态响应代码表示客户端请求尚未完成，因为它缺少所请求资源的有效身份验证凭据

‎brute/bypass403.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
"context"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
"net/http"
77
"regexp"
88
"strings"

‎brute/check_loginpage.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
package brute
22

33
import (
4-
"github.com/hktalent/ProScan4all/lib/util"
5-
"github.com/hktalent/ProScan4all/pkg/httpx/common/httpx"
4+
"github.com/hktalent/scan4all/lib/util"
5+
"github.com/hktalent/scan4all/pkg/httpx/common/httpx"
66
"net/url"
77
"regexp"
88
"strings"

‎brute/dicts.go

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
_ "embed"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
"strings"
77
)
88

@@ -21,14 +21,17 @@ var (
2121
)
2222

2323
// by waf
24+
//
2425
//go:embed dicts/selfHd.txt
2526
var selfHds string
2627

2728
// http 爆破user
29+
//
2830
//go:embed dicts/httpuser.txt
2931
var httpuser string
3032

3133
// http 爆破密码字典
34+
//
3235
//go:embed dicts/httpass.txt
3336
var httpass string
3437

‎brute/dicts/filedic.txt

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
/login.jsp
33
/stats.json
44
/.well-known/security.txt
5+
/maximum-wiki-prod-app/
6+
/uPlOaDs/
57
/admin/export?format=json
68
../../../../../../../../../../../../../../../../../../usr/local/cpanel/logs/login_log%00
79
../../../../../../../../../../../../../../../../../../usr/local/cpanel/logs/login_log

‎brute/filefuzz.go

Lines changed: 11 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,9 @@ import (
55
_ "embed"
66
"fmt"
77
"github.com/antlabs/strsim"
8-
"github.com/hktalent/ProScan4all/lib/util"
9-
"github.com/hktalent/ProScan4all/pkg/fingerprint"
108
Const "github.com/hktalent/go-utils"
9+
"github.com/hktalent/scan4all/lib/util"
10+
"github.com/hktalent/scan4all/pkg/fingerprint"
1111
"io/ioutil"
1212
"log"
1313
"mime"
@@ -156,14 +156,15 @@ func init() {
156156
}
157157
//regs = append(regs, ret...)
158158
// 基于工厂方法构建
159-
util.EngineFuncFactory(Const.ScanType_WebDirScan, func(evt *Const.EventData, args ...interface{}) {
160-
for _, x := range evt.EventData {
161-
szT := fmt.Sprintf("%v", x)
162-
filePaths, fileFuzzTechnologies := FileFuzz(szT, 200, 100, "")
163-
util.SendEngineLog(evt, Const.ScanType_WebDirScan, filePaths, fileFuzzTechnologies)
164-
}
165-
})
166-
159+
if nil != util.EngineFuncFactory {
160+
util.EngineFuncFactory(Const.ScanType_WebDirScan, func(evt *Const.EventData, args ...interface{}) {
161+
for _, x := range evt.EventData {
162+
szT := fmt.Sprintf("%v", x)
163+
filePaths, fileFuzzTechnologies := FileFuzz(szT, 200, 100, "")
164+
util.SendEngineLog(evt, Const.ScanType_WebDirScan, filePaths, fileFuzzTechnologies)
165+
}
166+
})
167+
}
167168
// 注册一个
168169
})
169170
}

‎brute/fuzzAI.go

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,9 +3,9 @@ package brute
33
import (
44
_ "embed"
55
"github.com/antlabs/strsim"
6-
"github.com/hktalent/ProScan4all/lib/util"
7-
"github.com/hktalent/ProScan4all/pkg"
8-
"github.com/hktalent/ProScan4all/pkg/fingerprint"
6+
"github.com/hktalent/scan4all/lib/util"
7+
"github.com/hktalent/scan4all/pkg"
8+
"github.com/hktalent/scan4all/pkg/fingerprint"
99
jsoniter "github.com/json-iterator/go"
1010
"gorm.io/gorm"
1111
"net/url"

‎brute/fuzzfingerprints.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
"fmt"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
"strings"
77
)
88

‎brute/jboss_brute.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
"fmt"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
)
77

88
func Jboss_brute(url string) (username string, password string) {

‎brute/supportinfo.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
_ "embed"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
"regexp"
77
"strings"
88
)

‎brute/tomcat_brute.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ package brute
22

33
import (
44
"fmt"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
)
77

88
func Tomcat_brute(url string) (username string, password string) {

‎brute/weblogic_brute.go

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,14 @@ package brute
22

33
import (
44
"fmt"
5-
"github.com/hktalent/ProScan4all/lib/util"
5+
"github.com/hktalent/scan4all/lib/util"
66
)
77

88
// weblogic默认的登陆尝试次数为5次，
9-
// 5次失败则weblogic用户锁定，即使你已经找到正确的密码，也不能登陆到console
10-
// 默认的锁定时间为30分钟，后期可以设置策略，自动后台运行，每30分钟走一轮不重复的密码
11-
// 后期再优化间隔35分钟后继续后面的密码
9+
//
10+
// 5次失败则weblogic用户锁定，即使你已经找到正确的密码，也不能登陆到console
11+
// 默认的锁定时间为30分钟，后期可以设置策略，自动后台运行，每30分钟走一轮不重复的密码
12+
// 后期再优化间隔35分钟后继续后面的密码
1213
func Weblogic_brute(url string) (username string, password string) {
1314
if req, err := util.HttpRequset(url+"/console/login/LoginForm.jsp", "GET", "", false, nil); err == nil {
1415
if req.StatusCode == 200 {

‎config/scan4all_db.db

0 Bytes
Binary file not shown.

‎cveMain.go

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,32 +2,32 @@ package main
22

33
import (
44
"embed"
5-
_ "github.com/hktalent/ProScan4all/engine"
6-
"github.com/hktalent/ProScan4all/lib/util"
7-
"github.com/hktalent/ProScan4all/pocs_go"
8-
"github.com/hktalent/ProScan4all/pocs_go/Springboot"
9-
"github.com/hktalent/ProScan4all/pocs_go/ThinkPHP"
10-
"github.com/hktalent/ProScan4all/pocs_go/VMware/vCenter"
11-
"github.com/hktalent/ProScan4all/pocs_go/apache"
12-
"github.com/hktalent/ProScan4all/pocs_go/confluence"
13-
"github.com/hktalent/ProScan4all/pocs_go/f5"
14-
"github.com/hktalent/ProScan4all/pocs_go/fastjson"
15-
"github.com/hktalent/ProScan4all/pocs_go/gitlab"
16-
"github.com/hktalent/ProScan4all/pocs_go/jboss"
17-
"github.com/hktalent/ProScan4all/pocs_go/jenkins"
18-
"github.com/hktalent/ProScan4all/pocs_go/landray"
19-
"github.com/hktalent/ProScan4all/pocs_go/mcms"
20-
"github.com/hktalent/ProScan4all/pocs_go/ms"
21-
"github.com/hktalent/ProScan4all/pocs_go/phpunit"
22-
"github.com/hktalent/ProScan4all/pocs_go/ruby"
23-
"github.com/hktalent/ProScan4all/pocs_go/seeyon"
24-
"github.com/hktalent/ProScan4all/pocs_go/spark"
25-
"github.com/hktalent/ProScan4all/pocs_go/sunlogin"
26-
"github.com/hktalent/ProScan4all/pocs_go/tomcat"
27-
"github.com/hktalent/ProScan4all/pocs_go/tongda"
28-
"github.com/hktalent/ProScan4all/pocs_go/weblogic"
29-
"github.com/hktalent/ProScan4all/pocs_go/zabbix"
30-
"github.com/hktalent/ProScan4all/pocs_go/zentao"
5+
_ "github.com/hktalent/scan4all/engine"
6+
"github.com/hktalent/scan4all/lib/util"
7+
"github.com/hktalent/scan4all/pocs_go"
8+
"github.com/hktalent/scan4all/pocs_go/Springboot"
9+
"github.com/hktalent/scan4all/pocs_go/ThinkPHP"
10+
"github.com/hktalent/scan4all/pocs_go/VMware/vCenter"
11+
"github.com/hktalent/scan4all/pocs_go/apache"
12+
"github.com/hktalent/scan4all/pocs_go/confluence"
13+
"github.com/hktalent/scan4all/pocs_go/f5"
14+
"github.com/hktalent/scan4all/pocs_go/fastjson"
15+
"github.com/hktalent/scan4all/pocs_go/gitlab"
16+
"github.com/hktalent/scan4all/pocs_go/jboss"
17+
"github.com/hktalent/scan4all/pocs_go/jenkins"
18+
"github.com/hktalent/scan4all/pocs_go/landray"
19+
"github.com/hktalent/scan4all/pocs_go/mcms"
20+
"github.com/hktalent/scan4all/pocs_go/ms"
21+
"github.com/hktalent/scan4all/pocs_go/phpunit"
22+
"github.com/hktalent/scan4all/pocs_go/ruby"
23+
"github.com/hktalent/scan4all/pocs_go/seeyon"
24+
"github.com/hktalent/scan4all/pocs_go/spark"
25+
"github.com/hktalent/scan4all/pocs_go/sunlogin"
26+
"github.com/hktalent/scan4all/pocs_go/tomcat"
27+
"github.com/hktalent/scan4all/pocs_go/tongda"
28+
"github.com/hktalent/scan4all/pocs_go/weblogic"
29+
"github.com/hktalent/scan4all/pocs_go/zabbix"
30+
"github.com/hktalent/scan4all/pocs_go/zentao"
3131
"log"
3232
"os"
3333
)

‎doNaabu_test.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
package main
22

33
import (
4-
"github.com/hktalent/ProScan4all/lib/util"
5-
"github.com/hktalent/ProScan4all/pkg/xcmd"
4+
"github.com/hktalent/scan4all/lib/util"
5+
"github.com/hktalent/scan4all/pkg/xcmd"
66
"log"
77
"strings"
88
"testing"

‎engine/engineImp.go

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@ import (
55
"context"
66
"fmt"
77
"github.com/asaskevich/govalidator"
8-
"github.com/hktalent/ProScan4all/lib/util"
9-
"github.com/hktalent/ProScan4all/pocs_go"
108
Const "github.com/hktalent/go-utils"
119
"github.com/hktalent/jaeles/cmd"
10+
"github.com/hktalent/scan4all/lib/util"
11+
"github.com/hktalent/scan4all/pocs_go"
1212
jsoniter "github.com/json-iterator/go"
1313
"github.com/karlseguin/ccache"
1414
"github.com/panjf2000/ants/v2"
@@ -424,14 +424,14 @@ func (x1 *Engine) Running() {
424424
// 引擎总入口
425425
func init() {
426426
//log.Println("engineImp.go run")
427-
util.RegInitFunc4Hd(func() {
428-
// 下面的变量 不能移动到DoSyncFunc，否则全局变量将影响后续的init，导致无效的内存
429-
NewEngine(&util.Ctx_global, util.GetValAsInt("ScanPoolSize", 5000))
430-
431-
util.DoSyncFunc(func() {
432-
util.G_Engine.(*Engine).Running()
433-
})
434-
})
427+
//util.RegInitFunc4Hd(func() {
428+
// // 下面的变量 不能移动到DoSyncFunc，否则全局变量将影响后续的init，导致无效的内存
429+
// NewEngine(&util.Ctx_global, util.GetValAsInt("ScanPoolSize", 5000))
430+
//
431+
// util.DoSyncFunc(func() {
432+
// util.G_Engine.(*Engine).Running()
433+
// })
434+
//})
435435
}
436436

437437
// 发送方 的签名key

‎geCurIp_test.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
package main
22

33
import (
4-
"github.com/hktalent/ProScan4all/lib/Smuggling"
5-
"github.com/hktalent/ProScan4all/lib/util"
4+
"github.com/hktalent/scan4all/lib/Smuggling"
5+
"github.com/hktalent/scan4all/lib/util"
66
"os"
77
"testing"
88
)

‎generateCLTE_test.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
package main
22

33
import (
4-
main2 "github.com/hktalent/ProScan4all/lib/Smuggling/generate"
54
util "github.com/hktalent/go-utils"
5+
main2 "github.com/hktalent/scan4all/lib/Smuggling/generate"
66
"testing"
77
)
88

0 commit comments

Comments
 (0)